mirror of
https://github.com/hanzoai/bot.git
synced 2026-10-30 17:24:26 +00:00
zeekay
c715d72ffd
Merged 3580 upstream commits from openclaw/main through a bridge branch that applied the openclaw→hanzo-bot rebrand before merging. Key upstream additions: - Android device diagnostics and notification actions - Device-auth v2 migration improvements - Docker CLI packaging fixes - Ollama discovery log demotion - Channel health monitoring - Slack native streaming - Linq iMessage channel - Gemini OAuth and FTS improvements - Inbound sender metadata - Daemon PATH improvements - Canvas host and onboarding enhancements - Security hardening (session files, exec allowlist)
77 lines
2.9 KiB
Swift
77 lines
2.9 KiB
Swift
import Foundation
|
|
import Testing
|
|
@testable import Bot
|
|
|
|
struct ExecHostRequestEvaluatorTests {
|
|
@Test func validateRequestRejectsEmptyCommand() {
|
|
let request = ExecHostRequest(command: [], rawCommand: nil, cwd: nil, env: nil, timeoutMs: nil, needsScreenRecording: nil, agentId: nil, sessionKey: nil, approvalDecision: nil)
|
|
switch ExecHostRequestEvaluator.validateRequest(request) {
|
|
case .success:
|
|
Issue.record("expected invalid request")
|
|
case .failure(let error):
|
|
#expect(error.code == "INVALID_REQUEST")
|
|
#expect(error.message == "command required")
|
|
}
|
|
}
|
|
|
|
@Test func evaluateRequiresPromptOnAllowlistMissWithoutDecision() {
|
|
let context = Self.makeContext(security: .allowlist, ask: .onMiss, allowlistSatisfied: false, skillAllow: false)
|
|
let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: nil)
|
|
switch decision {
|
|
case .requiresPrompt:
|
|
break
|
|
case .allow:
|
|
Issue.record("expected prompt requirement")
|
|
case .deny(let error):
|
|
Issue.record("unexpected deny: \(error.message)")
|
|
}
|
|
}
|
|
|
|
@Test func evaluateAllowsAllowOnceDecisionOnAllowlistMiss() {
|
|
let context = Self.makeContext(security: .allowlist, ask: .onMiss, allowlistSatisfied: false, skillAllow: false)
|
|
let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: .allowOnce)
|
|
switch decision {
|
|
case .allow(let approvedByAsk):
|
|
#expect(approvedByAsk)
|
|
case .requiresPrompt:
|
|
Issue.record("expected allow decision")
|
|
case .deny(let error):
|
|
Issue.record("unexpected deny: \(error.message)")
|
|
}
|
|
}
|
|
|
|
@Test func evaluateDeniesOnExplicitDenyDecision() {
|
|
let context = Self.makeContext(security: .full, ask: .off, allowlistSatisfied: true, skillAllow: false)
|
|
let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: .deny)
|
|
switch decision {
|
|
case .deny(let error):
|
|
#expect(error.reason == "user-denied")
|
|
case .requiresPrompt:
|
|
Issue.record("expected deny decision")
|
|
case .allow:
|
|
Issue.record("expected deny decision")
|
|
}
|
|
}
|
|
|
|
private static func makeContext(
|
|
security: ExecSecurity,
|
|
ask: ExecAsk,
|
|
allowlistSatisfied: Bool,
|
|
skillAllow: Bool) -> ExecApprovalEvaluation
|
|
{
|
|
ExecApprovalEvaluation(
|
|
command: ["/usr/bin/echo", "hi"],
|
|
displayCommand: "/usr/bin/echo hi",
|
|
agentId: nil,
|
|
security: security,
|
|
ask: ask,
|
|
env: [:],
|
|
resolution: nil,
|
|
allowlistResolutions: [],
|
|
allowlistMatches: [],
|
|
allowlistSatisfied: allowlistSatisfied,
|
|
allowlistMatch: nil,
|
|
skillAllow: skillAllow)
|
|
}
|
|
}
|